API Authentication
Orbitype exposes a full-featured RESTful API that you can connect to from your
own code. Read, create, update, and delete items with simple HTTP requests.
TABLE_OF_CONTENTS
First steps
To get started, go to your project's settings page and generate a new API key.
Each key is scoped to exactly one connector. Make sure to include it in each
request as a custom
X-API-KEYheader. Sending an
HTTP OPTIONSrequest to the API
base URL will return the IDs of the project and connector the key is scoped
to.
Authentication Headers
Make sure to include the API key in your requests as a custom header:
X-API-KEY: your-key-hereYou can verify your key’s scope by sending an OPTIONS request:
http request OPTIONS https://core.orbitype.com/api X-API-KEY: your-key-hereThe response will contain the project and connector IDs:
{ \n \"projectId\": \"your-project-uuid\", \n \"connectorId\": \"your-connector-uuid\" \n}Copy-paste config (Cursor, Production)
Create
.cursor/mcp.jsonand paste:
{
"mcpServers": {
"orbitype-sql-prod": {
"url": "https://core.orbitype.com/api/mcp/v1",
"headers": {
"X-API-KEY": "${env:ORBITYPE_SQL_API_KEY_PROD}"
}
},
"orbitype-s3-public-prod": {
"url": "https://core.orbitype.com/api/mcp/v1",
"headers": {
"X-API-KEY": "${env:ORBITYPE_S3_PUBLIC_API_KEY_PROD}"
}
},
"orbitype-s3-private-prod": {
"url": "https://core.orbitype.com/api/mcp/v1",
"headers": {
"X-API-KEY": "${env:ORBITYPE_S3_PRIVATE_API_KEY_PROD}"
}
}
}
}Copy-paste config (Claude Desktop, Production)
Open
~/Library/Application Support/Claude/claude_desktop_config.jsonand paste into
mcpServers:
{
"orbitype-sql-prod": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://core.orbitype.com/api/mcp/v1",
"--header",
"X-API-KEY: <SQL_PROD_KEY>"
]
},
"orbitype-s3-public-prod": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://core.orbitype.com/api/mcp/v1",
"--header",
"X-API-KEY: <S3_PUBLIC_PROD_KEY>"
]
},
"orbitype-s3-private-prod": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://core.orbitype.com/api/mcp/v1",
"--header",
"X-API-KEY: <S3_PRIVATE_PROD_KEY>"
]
}
}MCP endpoint (Core)
Orbitype also exposes MCP on Core:
POST https://core.orbitype.com/api/mcp/v1Authentication is the same as REST:
X-API-KEY: your-key-hereOne API key is bound to one connector. Discovery and tools are automatically scoped to that connector.
MCP discovery and context
Use standard JSON-RPC methods:
initializetools/listtools/callRecommended first call:
orbitype_get_contextThis returns project/connector context, S3 prefix (if applicable), and guidance for safe usage.
Available MCP tools
Tool names are Cursor-compatible (alphanumeric + underscores):
SQL
sql_readonly_querysql_crud_executeS3
s3_lists3_puts3_deletes3_copys3_signed_urlContext
orbitype_get_contextS3 prefix enforcement
For shared buckets, Orbitype enforces connector prefixes server-side for S3 calls.
Paths must start with the connector prefix (for
path,
from,
to). Invalid paths return a JSON-RPC validation error instead of an unclear AWS error.
Claude Desktop MCP setup
Some Claude Desktop versions reject remote
url + headersconfigs directly. Use
mcp-remotein
~/Library/Application Support/Claude/claude_desktop_config.json:
{\n \"mcpServers\": {\n \"orbitype-sql-prod\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"mcp-remote\",\n \"https://core.orbitype.com/api/mcp/v1\",\n \"--header\",\n \"X-API-KEY: <SQL_PROD_KEY>\"\n ]\n }\n }\n}Cursor MCP setup
Create or update
.cursor/mcp.json:
{\n \"mcpServers\": {\n \"orbitype-sql-prod\": {\n \"url\": \"https://core.orbitype.com/api/mcp/v1\",\n \"headers\": {\n \"X-API-KEY\": \"${env:ORBITYPE_SQL_API_KEY_PROD}\"\n }\n }\n }\n}Use separate entries for SQL/S3/public/private keys as needed.
